The reason I've heard for rebuilding after 17.0 update is to pick the new PIE default. However as I was already on hardened profile my ~amd64 systems are already built with this flag. Is there any reason for emerge -e world on my system or would it be pure waste of energy?

That said, even if the project- or the grsecurity part of it- dies, I'm thankful for all the time I did have on it, and the efforts of the Gentoo hardened maintainers. Sucks for them too- they've put tons of time into this project


While I am not that quick to judge upstream I am sorry if I gave ...

Given that grsecurity stopped releasing patches post-4.9 what is the status of hardened-sources going forward?

How stable is LTO in gcc 5? I found information for gcc 4.8 and 4.9 when it was not but not for 5+.

A lot of the security things are needed in conjunction with each other - removing one will weaken the remaining...

I view it as all or nothing.

I think there are at least some shadows of grey between running military grade SELinux installation and ignoring error about self-signed certificate ...

Security is always a tradeoff for convenience.

If you're willing to sacrifice security (PaX) to get convenience (less breakage) then sure...

To quantify the security loss, it all depends on the person hacking your machine...

Yeah sure. My question was rather if hardened sources - Pax == vanilla ...

I tried to run hardened Gentoo but I discovered that PaX is breaking too much. Are there any benefits to hardened sources w/out PaX?

I'm trying to debug some issues for which dmesg or even better journal after hang would be great to have (essentially I got hang during suspend). But pstore is empty for whatever reason. What am I doing wrong?

% zgrep PSTORE < /proc/config.gz
CONFIG_EFI_VARS_PSTORE=y
# CONFIG_EFI_VARS_PSTORE ...

Gentoo/GNU/Linux is a good operating system as server and client, but I hardly see how it is possible for a server or a client to workaround a problem who come from the other side of the link. There's probably some possibilities, but I would not count on a workaround on the client side to fix a ...

Hello,

do you know if the problem come from the server and/or the client side? If only one 'network' have the problem, it's not clear that your Gentoo box is responsable of it.

Do you disconnect/reconnect by yourself or it is Linux who do it? Some wireless module options can be set to try to help ...

Hi,

At one particular network the WiFi disconnects at (seemingly) random intervals even when connection is actively used. The network stacks still thinks that connection is working (interface is up, ping just shows that destination host is unreachable etc.).

I could not find anything interesting ...

Have you tried to use x11-misc/bumblebee ? I have no problems with it (ok - the virtualgl stopped working on multilib with steam so I switched to x11-misc/primus ).

Regarding lack of /dev/nvidia0 - it would indicate that a) nvidia driver is not loaded or b) something's else is wrong with ...

I encountered problem with alsa+pulse as the former cannot find pulse plugin. The workaround found in Google is to add /etc/ld.so.conf.d/50alsa.conf:


/usr/lib32/alsa-lib/
/usr/lib/alsa-lib/


Run ldconfig and change lines in /usr/share/alsa/alsa.conf.d/51-pulseaudio-probe.conf:


hook_func ...

Hu wrote:You could use /etc/portage/bashrc or /etc/portage/env/ to run bash code to filter the flags. What package is this that forces a non-gcc compiler and still uses the regular CXXFLAGS?

Thanks. Package is [bug=444544]accelerate-cuda from Haskell overlay[/bug].

Given that files pointed from /etc/portage/package.env are not bash scripts is it possible to search and replace in C(XX)FLAGS? I have a package which passes CXXFLAGS to non-gcc compiler and throws errors - but there seems to be no way to just say 'filter this flag' from within /etc/portage and the ...

Veldrin wrote:If it is masked like this, then it is usually the profile masking it.

Why would it masked only this package? Also where would it be masked (I read use.mask of profile, profile parents etc. before posting on forum)?

Suddenly something started forcing -systemd USE flag on polkit. Any hints how to find out what is it?

[ebuild N ] sys-auth/consolekit-0.4.5_p20120320-r1 USE="acl pam policykit -debug -doc (-selinux) {-test}" 101 kB
[ebuild R ] sys-auth/pambase-20120417-r1 USE="consolekit* cracklib gnome-keyring ...

Why do you have ConsoleKit installed when Systemd's logind replaces it's functionality?

It was in profile and I wasn't sure if everything was ported.

Anyway the sessions in logind are not registered anyway (I've checked before posting):

% systemd-loginctl list-seats | cat
seat0
% systemd ...

Why do you have ConsoleKit installed when Systemd's logind replaces it's functionality?

It was in profile and I wasn't sure if everything was ported.

Anyway the sessions in logind are not registered anyway (I've checked before posting):

% systemd-loginctl list-seats | cat
seat0
% systemd ...

Hi Uzytkownik.

AFAIK consolekit has to be started with your default runlevel, so add it, if its not in.

I use systemd so it was autostarted if anyone tried to communicate with it. In any case enabling it did not helped:

% systemctl status console-kit-daemon.service
console-kit-daemon.service ...

I use gnome 3.4 on otherwise ~amd64 system. I've reinstalled gentoo onto another machine and it looks like consolekit is not working.

% dbus-send --system --print-reply --dest=org.freedesktop.ConsoleKit /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.GetSeats
method return ...

Uzytkownik,

udev 180/181 is broken with a separate /usr and or /var


Are you sure? I've used udev 180/181 without problems with separate /var (I have /usr on / partition).


but dracut is supposed to build an initrd that fixes this,


It fails however with information that udev couldn't ...

When I try to use udev 180/181 with dracut 16 no devices are created during early boot as udev cannot settle. Any idea what may be wrong?

Leaving an .so around means the user needs to run "revdep-rebuild --library soname" respectively "cave fix-linkage --library soname" and manually remove the .so afterwards. I'm not sure which one is more annoying.

Either way, keeping the sources of installed packages is good practice. Use "eclean ...

According to PMS the .so gets removed and in fact needs to be removed to be picked up by revdep-rebuild or cave fix-linkage. As long as you still have the sources for wget this isn't an issue, just reinstall it first.

Portage-2.2 isn't stable and probably won't be stabilized anytime soon.

Thanks ...